[c-nsp] Netflow with nfsen issue

[Peter Rathlev]

On Fri, 2016-07-01 at 12:39 -0400, Satish Patel wrote:
> I have following network configured on Cisco ASR1000 but i am seeing
> wrong date on nfsen, does anyone experience this issue?
> 
> Should i use ipfix or Netflow v9 ?   I did capture wireshark and its
> showing correct date and time.
> 
> flow record netflow-record
>  match ipv4 destination address
>  match ipv4 source address
>  match transport destination-port
>  match transport source-port
>  match ipv4 protocol
>  collect counter bytes
>  collect counter packets

I'm not familiar with ASR1000 but on C6k you need to add timestamp
collection. This is our template for IPv4:

flow record IPV4-FULL
 match ipv4 tos
 match ipv4 protocol
 match ipv4 source address
 match ipv4 destination address
 match transport source-port
 match transport destination-port
 collect transport tcp flags
 collect interface input
 collect counter bytes long
 collect counter packets long
 collect timestamp sys-uptime first   <---
 collect timestamp sys-uptime last    <---
!

-- 
Peter